Forum rules
ATTN:!! Only users pre-approved by TeMerc may offer help and assistance in malware removal. Any and all unauthorized posts will be removed without notice. Please read this thread for proper HijackThis! installation.

Follow the prompts for the default install location of:'C:\Program Files\HijackThis'.

Tick the button when the option appears.

Then hit the button.

After the 'Ready To Install' section hit the button and HJT will open

Then press the button. Once you've pressed the button, it will turn into a button.

Click the button and 'Save logfile...' dialog box will appear. Save the file to your desktop for easy access. Open the notepad file. Once you've opened the file from the desktop, insert the cursor into the text field and hit the 'Ctrl' key & the 'a' key, this will highlight all text. Right-click in the saved log, and select.

Then proceed to your original thread, unless otherwise instructed and click the '[Reply]' button and paste the saved contents to be reviewed. Do not make any modifications to the log or perform any 'fixes' until told to do so.

Note: The Trend Micro HijackThis! is now out of beta and if you have already installed it there is no need to install the version listed above. Please be sure to update your beta version if you have it.

===============================================

Some of the common tasks performed with HijackThis!

Generate a Startup listOpen HJT

Click the button.

Then click the button in the lower right hand of the program.

Select the button.

In the upper left hand side of the program tick the two boxes

Select when prompted by the dialog box.

The resultant scan will produce a notepad log file, please paste that log file back into your thread.

Using ADS SpyOpen HJT

Click the button

Then click on the button

Then click the button

Then untick the box

Then click the button

When it finds the file, select it and hit the button

Close HJT

Generating an uninstall listOpen HJT

Open HJT, click the button.

Click on the button

Click on the button

Click on the button

Then click on the button and specify where you would like to save this file.

When you press button a notepad file will open with the contents of that file.

Copy and paste the contents of that notepad back into your thread.

Finding an uninstall commandOpen HJT

Select the button

Then click the button

then select the button

Then select the button

Hilight the specified entry and copy the uninstall command info which will be in the upper right hand corner of HJT ash shown below

Instructions for booting into safe mode and setting all files and folders to display.Windows VistaRestart your computer.When the computer starts you will see your computer's hardware being listed. When you see this information start to gently tap the F8 key repeatedly until you are presented with the Windows Vista Advanced Boot Options.Select the Safe Mode option using the arrow keys.Then press the enter key on your keyboard to boot into Vista Safe Mode.When Windows starts you will be at a typical logon screen. Logon to your computer and Vista will enter Safe mode. Do whatever tasks you require, and when you are done, reboot to go back into normal mode.

WINXP

Reboot, into safe mode, this way:Turn on the computer Immediately begin tapping the <F8> key. Use the arrow keys to highlight Safe Mode and press the <Enter> key.

WIN 2000Reboot, into safe mode, this way:Turn on your computer. Press the <F8> key, as soon as you see the message: For troubleshooting and advanced startup options for Windows 2000, press F8.The Windows 2000 Advanced Options Menu appears.Safe Mode should be highlighted by default, if not, using the arrow keys, highlight it and press the <Enter> key.

WIN MEReboot, into safe mode, this way:Turn on your computer. Hold down the <Ctrl> key until the Microsoft Windows Millennium Startup Menu appears. Use the arrow keys to highlight Safe Mode, then press the <Enter> key.

Also, enable the 'Show Hidden Folders' option, like this:Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. Click Start, Programs and Accessories and open Windows Explorer. Select a hard drive from the left hand side of the Windows Explorer window. Select View the Entire contents of this drive.

WIN98\SEReboot, into safe mode, one of these ways:Method 1 Turn on your computer. Hold down the <Ctrl> key until the Windows 98 Startup menu appears. Highlight or select Safe Mode (usually number 3) from the Startup menu. Press the <Enter> key.

Choose to restart your computer when prompted. When the system restarts, use the arrow keys to highlight Safe Mode, then press the <Enter> key.

Method 3 Insert a non-bootable floppy disk in the floppy drive, and restart your computer. When the message Non-system disk or disk error. Replace and strike any key when ready appears, remove the floppy disk from the drive. Press the <F8> key twice. The Windows 98 Startup menu appears. Use the arrow keys to highlight Safe Mode, and press the <Enter> key. Method 4 If Windows 98 fails to start, it will attempt to enter Safe Mode automatically on the following restart.